Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ece6697a-e38a-3724-aa98-b45481cb6d63.roa
File:                     ece6697a-e38a-3724-aa98-b45481cb6d63.roa (raw, json)
Hash identifier:          ehNKjNWOkd5Sihm9TAnqnky0dLNQUf23ZjEOZc1zWBA=
Subject key identifier:   54:BD:EE:BC:99:2C:8B:A5:76:95:B7:A3:DD:C5:00:A7:75:C2:06:3A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A3CC4CDE756C50905DBDE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ece6697a-e38a-3724-aa98-b45481cb6d63.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.80.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:3c:c4:cd:e7:56:c5:09:05:db:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=39ed30d1-027f-4b2a-80a7-627d49d82866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:41:76:74:ef:df:fe:0b:b7:c1:41:c9:f8:
                    73:21:98:fe:f6:d5:c2:a5:a4:10:bc:4b:df:31:15:
                    60:06:67:70:ef:c0:04:db:f1:55:fe:99:4f:26:a8:
                    6d:98:a0:7e:5f:31:bb:35:10:d2:cd:bd:7f:9f:d1:
                    69:8c:41:bb:37:33:20:5d:9b:2f:57:6a:ca:2a:d1:
                    e9:6d:f2:65:e5:fb:3a:26:88:db:ed:69:35:3f:2a:
                    b6:a0:58:a4:14:88:2e:cc:49:02:4c:f5:52:c1:ee:
                    12:8f:59:be:7e:07:3c:89:ca:51:8c:b7:00:38:cc:
                    d3:40:0e:a8:e5:f5:ff:b3:bf:af:51:6e:cf:9b:6d:
                    16:14:7d:01:af:f7:7e:cb:fd:73:1c:8a:fd:10:cc:
                    7d:06:a5:de:f5:dc:89:8b:84:59:6e:46:c3:93:4d:
                    44:33:71:98:54:ea:3f:bb:45:a4:63:41:bd:f8:4e:
                    c1:d7:75:03:8b:64:ca:e4:2b:fc:16:5f:c0:8e:85:
                    7d:a7:43:b9:c4:e5:7a:20:f7:f1:36:66:af:95:91:
                    21:2d:ad:5f:b1:c8:06:d9:63:ae:0b:3e:10:13:62:
                    9e:f1:2b:44:00:c2:ff:fa:93:42:63:1d:32:c0:a2:
                    e1:bb:eb:b3:f7:c6:a5:27:12:64:ad:d9:e4:30:a3:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BD:EE:BC:99:2C:8B:A5:76:95:B7:A3:DD:C5:00:A7:75:C2:06:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ece6697a-e38a-3724-aa98-b45481cb6d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.80.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:9a:f0:8e:38:fe:fd:19:d5:db:89:c7:90:33:15:83:c5:
         49:5c:e6:82:fd:62:e6:1d:ee:88:ec:2c:3d:57:d2:58:79:08:
         23:bc:21:bf:f1:60:dd:66:f8:39:a7:f9:f6:3d:de:29:79:ee:
         4e:98:73:e4:c5:a2:f4:d6:cb:ab:24:71:2f:5d:b5:2f:c4:f1:
         e3:3d:08:8f:6d:82:5b:1f:19:1d:2f:14:5c:f7:17:88:bc:e0:
         a1:3a:f3:0f:2d:8b:bd:3e:2b:13:4e:5f:8a:34:ee:15:ca:50:
         21:48:b2:76:b3:0b:5d:10:d3:76:05:82:62:63:21:64:93:79:
         5c:2a:a9:65:40:31:23:8d:48:14:a7:9e:08:9f:0a:bc:64:97:
         f4:41:b4:2f:a6:ac:c7:e3:12:a1:d4:da:b3:66:dc:1f:5f:b2:
         1a:72:02:3e:55:03:14:35:a5:ed:c7:4f:fc:97:5b:d0:f9:d6:
         d8:0a:c1:6b:a9:d9:95:20:aa:68:59:95:82:5c:b5:c4:20:93:
         b3:ca:28:11:c7:93:0e:ed:d7:88:0e:ad:cc:69:f4:aa:8c:b7:
         dd:04:17:24:d4:03:d6:99:5e:ed:03:e8:23:76:b8:37:4c:7c:
         9a:74:61:d0:c2:f4:93:58:44:0f:79:1f:8c:30:83:39:a2:b7:
         5a:d0:48:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1aPMTN51bFCQXb3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MzllZDMwZDEtMDI3Zi00YjJhLTgwYTctNjI3ZDQ5ZDgyODY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH5BdnTv3/4Lt8FByfhzIZj+9tXCpaQQvEvf
MRVgBmdw78AE2/FV/plPJqhtmKB+XzG7NRDSzb1/n9FpjEG7NzMgXZsvV2rKKtHp
bfJl5fs6Jojb7Wk1Pyq2oFikFIguzEkCTPVSwe4Sj1m+fgc8icpRjLcAOMzTQA6o
5fX/s7+vUW7Pm20WFH0Br/d+y/1zHIr9EMx9BqXe9dyJi4RZbkbDk01EM3GYVOo/
u0WkY0G9+E7B13UDi2TK5Cv8Fl/AjoV9p0O5xOV6IPfxNmavlZEhLa1fscgG2WOu
Cz4QE2Ke8StEAML/+pNCYx0ywKLhu+uz98alJxJkrdnkMKNVVwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFS97ryZLIuldpW3o93FAKd1wgY6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWNlNjY5N2EtZTM4YS0z
NzI0LWFhOTgtYjQ1NDgxY2I2ZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBY1AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAn4+a8I44/v0Z1duJx5AzFYPFSVzmgv1i5h3uiOwsPVfSWHkII7whv/Fg
3Wb4Oaf59j3eKXnuTphz5MWi9NbLqyRxL121L8Tx4z0Ij22CWx8ZHS8UXPcXiLzg
oTrzDy2LvT4rE05fijTuFcpQIUiydrMLXRDTdgWCYmMhZJN5XCqpZUAxI41IFKee
CJ8KvGSX9EG0L6asx+MSodTas2bcH1+yGnICPlUDFDWl7cdP/Jdb0PnW2ArBa6nZ
lSCqaFmVgly1xCCTs8ooEceTDu3XiA6tzGn0qoy33QQXJNQD1ple7QPoI3a4N0x8
mnRh0ML0k1hED3kfjDCDOaK3WtBI2w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:20 2025 by rpki-client